Live threat updates stop the latest attacks
Anti-malware engines that update hourly like Office 365 offer poor detection rates and will miss many of the thousands of new threats found every hour by SophosLabs. That’s why Sophos Email provides live updates to protect against the latest threats.
Anti-spam, antivirus, and anti-phishing detection
Sophos Email filtering blocks 99% of unwanted email at the gateway with a range of tools and security filters:
- Reputation filtering blocks 90% of spam
- Our anti-spam engine that catches the rest, including the latest phishing attacks, filtering incoming email using a variety of advanced detection methods across dozens of languages (outbound scanning coming soon*)
- Methods such as ‘Sender Genotype,’ our next-generation reputation filtering technology, eliminates botnet spam at the IP-connection level by monitoring connection requests and rejecting those showing evidence of botnet connections
- Sophos Delay Queue provides protection against snowshoe spam, a preferred method of sending spam campaigns
- Sophos CXMail advanced attachment scanning blocks infected attachments before they hit the inbox
- SPF (Send Policy Framework) authentication blocks spoofed email addresses, a common tactic used in spam and phishing attacks
Block infected attachments
Built and maintained by SophosLabs, the CXMail family of detection strategies is designed to stop threats like ransomware that are predominately distributed using email. The higher detection rate of CXMail is achieved by identifying suspicious content that is not regularly associated with email communication.
Specifically CXMail blocks Office documents that serve as downloaders (software that downloads and installs additional malware) and has been very effective in protecting customers from email-distributed ransomware.
Email quarantine
Sophos Email’s easy to use preset controls have your message quarantine policies setup and your business protected in seconds, with quarantined messages available for the past 30 days:
- High: Messages with a spam score less than 61 will be delivered
- Higher: Messages with a spam score over 60 but less than 91 will be quarantined
- Highest: Messages with a spam score over 90 will be deleted if you opt to do so, otherwise they will be quarantined (Sophos Default)
Once set up, don’t tie up your IT team with quarantine release requests – the end user portal lets users release mails on demand, and in-message quarantine digests provide a daily summary of quarantined mail, with the option to release direct from the inbox. However, if your admins need access to manage a user’s quarantine, you can also do this from the Admin view in Sophos Central.
Self-service portal for end users
Reduce the burden on your IT teams – Sophos Email provides your end users with access to the following tools:
- Manage quarantined emails (accept/delete emails)
- View messages in the event of an outage using the emergency inbox
Delay Queue to prevent snowshoe spam
Sophos Delay Queue gives you future-proof protection against snowshoe and hailstorm spam, intelligently delaying suspicious mail to run further anti-spam checks, then automatically re-scanning content with updated definitions to increase detection.
Watch How it Works
SPF (Send Policy Framework) authentication for inbound email.
Block forged (spoofed) email addresses; a common tactic used in spam and phishing attacks, and ensure you are only accepting traffic from legitimate email gateways.
Watch how it works
Read More